xrpmarkets[.]io

This domain was registered on May 21 2026 and currently resolves to IP address 188.114.96.3 hosted via CloudFlare infrastructure in CA. It presents an SSL certificate from Let's Encrypt identified by serial E8 and maintains MX records directing to smtp.google.com at priority 1. The domain returns HTTP status 200 and displays the exact page title XRPMarkets | XRP Exchange Rates Monitoring while remaining listed as active.

Threat intelligence records place the domain in one AlienVault OTX pulse. Five out of 95 vendors on VirusTotal have flagged the domain. Three security blocklists contain the entry. Blocking actions are recorded from PhishDestroy MetaMask and SEAL with a Gridinsoft trust score reported as 0 out of 100.

The combination of recent registration low trust metrics and explicit blocklist presence aligns with the assigned high risk level under generic phishing classification. Infrastructure details such as the CloudFlare IP and Let's Encrypt certificate are consistent with many short lived domains used for similar activity but do not independently confirm intent.

Defenders should add the domain and its current IP 188.114.96.3 to internal block lists and inspect network logs for connections or DNS queries. Email flows involving the smtp.google.com MX record warrant review for potential delivery of related messages. Ongoing monitoring of the domain status and any new resolutions is recommended given the confirmed active state on the report date of July 12 2026.